Re: Bad Agent on encrypted disk

[Michael Dickey <lonervamp () gmail com>]

Coincidentally, the same vendor had a signature set issue in the last few
weeks on their IPS platform. Fun times!

On Thu, Oct 7, 2010 at 6:47 AM, Grymoire <pauldotcom () grymoire com> wrote:

> Thanks for the ideas. It turns out the IT team was able to fix the
> problem.  For a while, it wasn't clear they could, and there were a
> lot of people affected. I was exploring options.
>
> It turns out this was not a fault of the IT team. One of the agents,
> which has been in place for months, downloaded a cryptographically
> signed update rule file (which by the way was not changed).
>
> What could go wrong? Well, for some reason not yet understood, the
> update rule file (which was not changed) got corrupted, and was
> downloaded, and validated, and installed. And the agent blue
> screened, nearly simultaneously on everyone's computer.
>
> Curious.
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com